$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa File: 657f8682-de8b-3ad4-9a97-6a6c03122181.roa (raw, json) Hash identifier: +jsHs8YPuJ6Zo3I5Or50iXwOQISB46EynXw3wcJ7zWY= Subject key identifier: 22:00:AF:4E:41:0F:B0:CA:82:53:A4:46:77:5B:EB:05:84:01:A1:71 Certificate issuer: /CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b Certificate serial: 010D0C9F4328584B2496D22585C53354D3C44580 Authority key identifier: D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 395631 IP address blocks: 23.131.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d2:25:85:c5:33:54:d3:c4:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=a431283c-afc5-48c4-808f-f1d644808287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:98:f8:db:35:e1:b5:a9:96:9e:79:b0:4e: 49:bd:b0:07:52:ae:05:e4:97:5f:da:d4:40:dc:d0: 99:da:85:65:c2:dc:ee:4c:5f:90:42:08:91:23:6e: 7d:2e:7a:5d:50:41:4a:ea:b4:f5:89:9a:4f:59:1e: d5:f1:91:37:9f:39:c2:03:4b:ba:1d:9a:72:c6:f3: da:a4:30:63:b4:b1:0e:47:73:26:13:2e:69:f8:d3: a7:b3:77:89:41:b0:01:96:b0:4f:48:01:7a:a2:78: 8e:10:a9:9d:93:0d:f6:1a:f8:dc:e6:24:5f:40:e5: 07:49:77:3c:e7:c1:98:07:a9:7d:d9:e3:b6:d9:60: 08:82:e5:17:e6:c5:0e:a0:0d:5a:3d:5f:b2:a6:92: e4:30:fd:b7:1c:d2:6a:33:d5:a1:7d:48:2c:ba:75: 4e:f3:ac:5b:1e:81:95:2c:c1:52:2f:7d:ac:01:57: 88:cb:20:a2:d5:12:33:c6:98:b9:dd:f4:bd:7e:a6: b0:2f:c9:85:d3:3b:05:d0:e3:90:3b:51:1b:f6:cd: 10:86:d1:5f:8b:99:be:dc:f9:2e:dc:5d:2f:b3:93: fe:3d:9f:07:49:c4:36:5e:4a:a7:cd:fe:e3:92:48: b6:03:c5:20:c8:f2:0f:36:ac:94:48:ad:61:8e:8b: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:AF:4E:41:0F:B0:CA:82:53:A4:46:77:5B:EB:05:84:01:A1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl X509v3 Authority Key Identifier: keyid:D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7d:61:87:d2:37:89:47:ca:fa:1c:7e:46:c2:fa:0e:ad:18: 58:de:87:fb:b0:a7:79:18:a1:54:a0:e6:1b:f6:41:77:ba:c9: cf:7c:f8:35:2b:00:b1:80:a5:22:88:75:a4:ba:e3:67:b0:ca: b1:3b:81:58:27:1b:d5:71:3c:c0:42:50:4f:fc:57:f8:f9:7a: f5:b9:64:3c:0f:74:e2:51:94:5e:5a:f7:54:68:d9:cd:85:1f: c3:36:a8:0b:48:f7:8c:dd:b2:74:72:c8:fa:7e:8d:74:15:7a: 5b:33:dd:a2:e4:21:eb:ad:f9:de:56:72:b0:c4:59:df:2e:8b: 11:86:1c:df:d7:61:68:94:0d:57:f0:8c:16:f7:6f:1f:76:08: 2f:fb:53:7e:74:eb:65:c8:73:37:ec:8b:57:bf:68:65:bd:de: d6:4e:2c:f2:80:42:a9:70:c5:43:6e:be:88:cc:fa:8f:70:12: 62:cb:ea:98:2c:05:c4:ac:14:be:40:6c:90:5c:44:43:ae:10: 33:b4:0b:e2:48:6e:57:b5:17:be:9c:93:4f:eb:0c:b2:11:d8: 83:c0:2e:99:c9:50:80:c4:39:c6:9b:7c:3a:58:d0:32:23:af: 6a:9d:bc:1d:a5:ad:68:d9:df:51:2d:df:be:8d:d1:aa:21:5d: de:04:ff:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltIlhcUzVNPERYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1ZGU1ZTktMTRhMS00NTIxLWIwZTctMWRiNDY4YzBi MDliMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YTQzMTI4M2MtYWZjNS00OGM0LTgwOGYtZjFkNjQ0ODA4Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP+Y+Ns14bWplp55sE5JvbAHUq4F5Jdf2tRA 3NCZ2oVlwtzuTF+QQgiRI259LnpdUEFK6rT1iZpPWR7V8ZE3nznCA0u6HZpyxvPa pDBjtLEOR3MmEy5p+NOns3eJQbABlrBPSAF6oniOEKmdkw32Gvjc5iRfQOUHSXc8 58GYB6l92eO22WAIguUX5sUOoA1aPV+yppLkMP23HNJqM9WhfUgsunVO86xbHoGV LMFSL32sAVeIyyCi1RIzxpi53fS9fqawL8mF0zsF0OOQO1Eb9s0QhtFfi5m+3Pku 3F0vs5P+PZ8HScQ2Xkqnzf7jkki2A8UgyPIPNqyUSK1hjou/zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIAr05BD7DKglOkRndb6wWEAaFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjVk ZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0NjhjMGIwOWIvNjU3Zjg2ODItZGU4Yi0z YWQ0LTlhOTctNmE2YzAzMTIyMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWI1ZGU1ZTktMTRhMS00NTIxLWIw ZTctMWRiNDY4YzBiMDliLzliNWRlNWU5LTE0YTEtNDUyMS1iMGU3LTFkYjQ2OGMw YjA5Yi5jcmwwHwYDVR0jBBgwFoAU18UDG1GFQv3stKYWuRxFdL6XTlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjVkZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0 NjhjMGIwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ9YYfSN4lHyvocfkbC+g6tGFjeh/uwp3kYoVSg5hv2QXe6yc98+DUr ALGApSKIdaS642ewyrE7gVgnG9VxPMBCUE/8V/j5evW5ZDwPdOJRlF5a91Ro2c2F H8M2qAtI94zdsnRyyPp+jXQVelsz3aLkIeut+d5WcrDEWd8uixGGHN/XYWiUDVfw jBb3bx92CC/7U35062XIczfsi1e/aGW93tZOLPKAQqlwxUNuvojM+o9wEmLL6pgs BcSsFL5AbJBcREOuEDO0C+JIble1F76ck0/rDLIR2IPALpnJUIDEOcabfDpY0DIj r2qdvB2lrWjZ31Et376N0aohXd4E/2I= -----END CERTIFICATE-----Generated at Mon Oct 20 21:57:38 2025 by rpki-client